Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/j3YxCtNyIc4E_WSWRnmzMAUJdJY.roa
File: j3YxCtNyIc4E_WSWRnmzMAUJdJY.roa (raw, json)
Hash identifier: Tzsk4aBbWeU21OVQKKT8em3jR8w0zmJTcx7deGDvF0U=
Subject key identifier: 8F:76:31:0A:D3:72:21:CE:04:FD:64:96:46:79:B3:30:05:09:74:96
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0192C9F347F8388A12E7F3982AF64AB53063
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/j3YxCtNyIc4E_WSWRnmzMAUJdJY.roa
Signing time: Sat 26 Oct 2024 17:50:16 +0000
ROA not before: Sat 26 Oct 2024 17:50:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.209.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 15:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c9:f3:47:f8:38:8a:12:e7:f3:98:2a:f6:4a:b5:30:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Oct 26 17:50:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f76310ad37221ce04fd64964679b33005097496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:79:c8:11:19:0e:cc:77:b8:4b:85:0f:3c:20:
43:5d:a4:b7:d3:29:55:eb:be:00:20:56:89:1b:7e:
96:f6:f2:5a:15:8f:c8:e7:74:5a:14:ed:f6:b9:b7:
73:93:96:ae:03:34:ba:80:37:24:c4:99:ec:28:10:
b1:34:e2:93:f5:a0:87:0e:a1:a9:2f:99:4f:bc:97:
ea:c3:32:a2:ce:c5:1b:79:36:1e:4f:b2:ab:ac:8e:
ce:05:8a:d8:35:1c:28:b1:52:58:2a:31:33:6b:c5:
9a:42:d5:93:ec:8b:7e:cb:4a:9d:87:aa:5a:7b:a5:
98:12:85:ff:09:b8:12:0d:52:02:df:8e:61:a0:3d:
fe:a2:72:67:ca:93:4d:0b:e9:4c:2b:7d:7d:01:e5:
90:29:ea:d4:02:36:dd:96:e7:ba:ff:79:50:1a:ac:
fc:35:77:8f:32:9b:19:6f:78:77:69:b9:20:62:e3:
9d:b2:3c:c8:ab:5c:f9:e1:2e:97:02:ec:bb:93:26:
a8:d1:45:8f:ad:e0:ff:df:5b:89:c7:6f:0e:70:d8:
6c:4b:d4:ab:74:26:7d:30:59:88:5a:c0:38:bd:5f:
ee:70:59:f5:93:07:db:4a:73:17:e1:18:c3:3b:6b:
d9:11:33:ee:13:dc:ca:c6:b5:c2:18:1d:de:d9:96:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:76:31:0A:D3:72:21:CE:04:FD:64:96:46:79:B3:30:05:09:74:96
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/j3YxCtNyIc4E_WSWRnmzMAUJdJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.179.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:88:e9:e0:cb:c8:d9:3a:a0:41:72:d7:d0:9e:2c:90:c8:73:
0f:a9:5a:ee:11:24:1c:c0:c6:b8:d1:ee:3b:8c:db:26:42:73:
9e:4e:dd:b3:40:29:b3:24:c1:7e:34:66:79:a2:41:f0:7d:b6:
e5:ec:59:ee:08:35:15:b1:e5:c6:f5:82:77:82:f0:a5:79:cd:
49:18:45:69:e9:b6:ac:c5:ce:24:33:49:e7:fc:0a:e4:cf:42:
22:ca:fd:84:08:ab:5b:53:ab:31:f7:9b:f4:04:9e:c4:3f:95:
0e:0d:f6:7b:8c:b6:73:55:3b:a7:30:88:4c:3e:93:8c:ba:93:
46:6c:88:23:20:4d:4c:3b:71:22:46:e8:80:9a:0f:e7:16:a2:
1c:3b:44:bd:41:49:21:45:e1:1f:98:bb:fc:fb:55:20:28:96:
3e:91:10:87:82:62:05:b3:83:d7:8a:15:33:53:e0:0d:1f:a1:
b3:e0:99:6c:8c:d9:94:43:9e:bc:d1:df:bc:62:df:d0:e4:c6:
1e:bd:6f:0c:41:98:e6:71:22:74:c0:b2:bd:23:71:36:b0:aa:
69:3d:06:24:07:aa:f2:c1:0c:87:e1:d6:07:3d:19:90:fe:fc:
4c:fd:ab:44:3d:40:97:e3:35:87:ee:f8:a7:79:a8:09:40:24:
f3:87:9e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:59 2024 by rpki-client on console-ams.rpki-client.org